IBM Support

QRadar: How to change the DNS IP address entries for QRadar 7.3.1, 7.3.2, and 7.3.3

Question & Answer


Question

How do you change the DNS server IP address in QRadar 7.3.1, 7.3.2, and 7.3.3?

Cause

A common reason for the DNS server IP address to change is it was issued a new IP address. When this occurs, it is important that the QRadar environment is updated with the DNS server IP address.

Answer

Starting with QRadar version 7.3.1, modifying DNS entries by using the command line would not be persistent. If the appliance is restarted, the entry updates revert to their original DNS settings. For QRadar 7.3.1, 7.3.2, and 7.3.3 the supported method is to change the DNS entries is by using qchange_netsetup. In an All in One appliance, the procedure is straight forward. If you have a distributed deployment, you need to unmanage all appliances requiring DNS updates before you can run qchange_netsetup. Using qchange_netsetup in a large deployment might result in a timely maintenance period.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"Networking","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3.1;7.3.2;7.3.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
09 February 2021

UID

ibm11282288